$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: auZLy/3CHp+sBJ3xdIxzbPRr6nV7RhYVvEKlFJiywhs= Subject key identifier: CD:AB:7A:BA:1C:8F:35:78:B3:3A:EF:85:A7:2E:3D:44:77:C4:6E:1D Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 4E00E566B98BD89910357D320DF4931B7B009805 Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa Signing time: Wed 05 Nov 2025 10:02:57 +0000 ROA not before: Wed 05 Nov 2025 09:57:57 +0000 ROA not after: Wed 04 Nov 2026 10:02:57 +0000 asID: 139972 IP address blocks: 2405:c440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 13:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:00:e5:66:b9:8b:d8:99:10:35:7d:32:0d:f4:93:1b:7b:00:98:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Nov 5 09:57:57 2025 GMT Not After : Nov 4 10:02:57 2026 GMT Subject: CN=CDAB7ABA1C8F3578B33AEF85A72E3D4477C46E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:64:c7:00:dd:a5:f5:c1:75:eb:0b:13:b9: 80:7e:e9:0e:0d:ab:85:62:c8:01:55:b2:56:0f:17: 5d:55:cd:8d:b1:bb:f3:74:14:3b:39:bd:0e:5f:5d: a0:91:b2:1f:a5:cc:2d:5c:b3:2b:bb:12:a9:0e:08: 6e:f5:e4:bc:35:24:b5:91:27:24:dd:c0:10:38:7c: 15:d4:66:38:77:3d:24:3b:d5:04:ee:f8:57:66:59: de:4c:8c:a5:db:9f:eb:63:a0:e6:43:da:99:27:5d: a1:1e:e6:01:be:6f:3c:f7:47:ed:a1:81:40:68:f7: 42:c3:5b:44:f8:24:83:50:1f:61:12:5f:4d:4a:4b: c0:45:65:78:3d:c6:20:ad:de:05:ee:b4:bf:6e:b3: a7:26:fb:ca:b4:55:33:06:8f:4e:21:12:d4:70:b2: de:4c:36:f4:25:af:08:30:85:a6:d1:9a:34:4e:45: 73:72:93:2a:45:53:98:5f:b8:cb:53:37:6c:b1:85: 97:99:04:fa:81:0a:f8:0f:cb:43:48:cb:4d:73:c2: 58:21:91:d2:55:a7:83:de:1b:89:2b:c7:02:e4:9d: 9e:be:12:13:ab:54:9c:94:38:ad:b2:89:26:27:89: f3:03:a1:e0:cf:43:a5:98:f1:28:2e:d0:c8:00:e1: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:7A:BA:1C:8F:35:78:B3:3A:EF:85:A7:2E:3D:44:77:C4:6E:1D X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:1::/48 Signature Algorithm: sha256WithRSAEncryption 95:99:b6:c5:48:0f:a3:91:19:d4:70:29:16:68:da:c7:b6:b1: 1e:6f:31:b9:32:73:4a:63:4d:db:08:88:0e:82:ad:39:76:08: 02:af:82:fc:62:9b:5f:9c:0b:a9:5f:27:f0:67:67:41:8f:b6: e9:52:a5:86:02:10:7e:35:93:b2:1b:41:78:75:49:2f:c6:56: fc:1c:97:4f:db:1f:77:40:46:d8:9a:38:b4:a0:38:71:c6:8a: c1:4a:ce:a6:a2:08:62:fa:ee:30:51:87:6e:dd:02:eb:a2:1d: 68:bc:98:90:34:f8:c5:4f:d8:ee:17:85:f8:07:5f:30:89:e9: ee:36:12:be:9c:4f:ff:b7:97:08:0c:60:8f:07:fe:4f:77:19: 1e:9a:6c:88:43:66:09:c6:81:f1:ac:4b:0c:be:45:f8:a5:77: 1b:a3:c4:52:68:cb:99:ff:a4:d0:58:72:44:f7:5b:a7:05:85: 54:6f:5f:4f:4e:af:51:55:ea:88:f5:ab:71:4a:e4:b5:42:07: d0:c6:08:b8:e5:2b:0f:21:12:87:c3:a2:51:53:c4:73:48:47: 27:39:79:4b:5a:a8:ba:a3:d9:7f:24:84:c6:44:2e:01:0d:2c: db:65:d3:d4:d6:85:82:f0:86:bc:63:51:71:3a:80:af:b6:2b: 2e:c2:7d:11 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTgDlZrmL2JkQNX0yDfSTG3sAmAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNTExMDUwOTU3NTdaFw0yNjExMDQxMDAyNTdaMDMxMTAvBgNV BAMTKENEQUI3QUJBMUM4RjM1NzhCMzNBRUY4NUE3MkUzRDQ0NzdDNDZFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYWTHAN2l9cF16wsTuYB+6Q4N q4ViyAFVslYPF11VzY2xu/N0FDs5vQ5fXaCRsh+lzC1csyu7EqkOCG715Lw1JLWR JyTdwBA4fBXUZjh3PSQ71QTu+FdmWd5MjKXbn+tjoOZD2pknXaEe5gG+bzz3R+2h gUBo90LDW0T4JINQH2ESX01KS8BFZXg9xiCt3gXutL9us6cm+8q0VTMGj04hEtRw st5MNvQlrwgwhabRmjRORXNykypFU5hfuMtTN2yxhZeZBPqBCvgPy0NIy01zwlgh kdJVp4PeG4krxwLknZ6+EhOrVJyUOK2yiSYnifMDoeDPQ6WY8Sgu0MgA4W69AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUzat6uhyPNXizOu+Fpy49RHfEbh0wHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAEw DQYJKoZIhvcNAQELBQADggEBAJWZtsVID6ORGdRwKRZo2se2sR5vMbkyc0pjTdsI iA6CrTl2CAKvgvxim1+cC6lfJ/BnZ0GPtulSpYYCEH41k7IbQXh1SS/GVvwcl0/b H3dARtiaOLSgOHHGisFKzqaiCGL67jBRh27dAuuiHWi8mJA0+MVP2O4XhfgHXzCJ 6e42Er6cT/+3lwgMYI8H/k93GR6abIhDZgnGgfGsSwy+RfildxujxFJoy5n/pNBY ckT3W6cFhVRvX09Or1FV6oj1q3FK5LVCB9DGCLjlKw8hEofDolFTxHNIRyc5eUta qLqj2X8khMZELgENLNtl09TWhYLwhrxjUXE6gK+2Ky7CfRE= -----END CERTIFICATE-----Generated at Wed Nov 5 23:53:04 2025 by rpki-client